518238c777dfa1a1dcdbb292e451f8398c12f9170a7d78e34ad67a7fc4cad515

Sharing

Copy URL

Twitter E-mail

General

Target

518238c777dfa1a1dcdbb292e451f8398c12f9170a7d78e34ad67a7fc4cad515
Size

550KB
MD5

5cfb7fa88b7216d0c61ed970d6489f57
SHA1

c7f1d8f4e764aa5575708297fae5df34ea780828
SHA256

518238c777dfa1a1dcdbb292e451f8398c12f9170a7d78e34ad67a7fc4cad515
SHA512

a6b05cdccac1edc153e8a0cf8fed271f6ab42908d746d94dae1921a3eee3ea137e394df16d28f79e48b2274c52ae6338b2c4f1c95eb70a671ecb85a519c8a793
SSDEEP

12288:ZDSxHwc8n/Qf1tIdNFLw5t0AdKNZfgLE3sfizrzv:Zm5EtEt0TgL8h3z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
518238c777dfa1a1dcdbb292e451f8398c12f9170a7d78e34ad67a7fc4cad515

Files

518238c777dfa1a1dcdbb292e451f8398c12f9170a7d78e34ad67a7fc4cad515
.exe windows:5 windows x86 arch:x86

e200dc250a9f9c3c62aa0b4e77a280ba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\users\junch\documents\visual studio 2012\Projects\IPCManager_FileWrite\Release\IPCManager_FileWrite.pdb

Imports

kernel32

CreateEventA
CloseHandle
HeapFree
Sleep
MultiByteToWideChar
FindNextChangeNotification
HeapAlloc
FindFirstChangeNotificationA
GetCurrentDirectoryA
GetCurrentThreadId
GetCurrentProcessId
CreateThread
GetProcessHeap
WideCharToMultiByte
WaitForMultipleObjects
QueryPerformanceCounter
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
GetLastError
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetSystemTimeAsFileTime
GetCommandLineA
RaiseException
RtlUnwind
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapSize
GetStdHandle
WriteFile
GetModuleFileNameW
GetFileType
ReadFile
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DeleteFileW
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetACP
IsValidCodePage
GetOEMCP
HeapReAlloc
SetFilePointer
GetTimeZoneInformation
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
ReadConsoleW
SetStdHandle
WriteConsoleW
CreateFileW
SetEndOfFile
SetEnvironmentVariableA
CreateDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
RemoveDirectoryW
DeviceIoControl
GetModuleHandleA
LocalFree
FormatMessageA
SetEvent
ResetEvent
ReleaseSemaphore
WaitForSingleObjectEx
OpenEventA
InterlockedExchangeAdd
InterlockedCompareExchange
ResumeThread
ExitThread

user32

MessageBoxW

advapi32

CryptAcquireContextA
CryptReleaseContext
CryptGenRandom

Sections

.text
Size: 395KB - Virtual size: 394KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e200dc250a9f9c3c62aa0b4e77a280ba

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

Sections

.text Size: 395KB - Virtual size: 394KB

.rdata Size: 75KB - Virtual size: 75KB

.data Size: 14KB - Virtual size: 23KB

.tls Size: 512B - Virtual size: 2B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 63KB - Virtual size: 63KB

.text
Size: 395KB - Virtual size: 394KB

.rdata
Size: 75KB - Virtual size: 75KB

.data
Size: 14KB - Virtual size: 23KB

.tls
Size: 512B - Virtual size: 2B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 63KB - Virtual size: 63KB